3135 matches found
SolarWinds Server and Application Monitor TSUnicodeGraphEditorControl graphManager.load Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of SolarWinds Server and Application Monitor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exis...
Solarwinds-Storage-Manager-5.1.0
Exploit Title: Solarwinds Storage Manager 5.1.0 Remote SYSTEM SQL Injection Exploit Date: May 2nd 2012 Author: muts Version: SolarWinds Storage Manager 5.1.0 Tested on: Windows 2003 Archive Url : http://www.offensive-security.com/0day/solarshell.txt import urllib, urllib2, cookielib import sys...
Log and Event Manager now with File Integrity Monitoring
Security pros everywhere rely on SolarWinds Log & Event Manager for powerful, affordable, and efficient Security Information and Event Management SIEM. Our All-In-One SIEM combines log management, event correlation, visualization, reporting, File Integrity Monitoring, USB defense, SQL database...
SolarWinds Log and Event Manager Detection
Binary data solarwindslemdetect.nbin...
SolarWinds Log and Event Manager Default Credentials
The remote SolarWinds Log and Event Manager install, a security information and event management SIEM solution, is protected with a set of known default credentials that allow administrator level access to the appliance. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
SolarWinds Log and Event Manager Unsupported Version Detection
According to its self-reported version number, the version of the SolarWinds Log and Event Manager on the remote host is no longer supported. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security...
Default Password (password) for 'cmc' Account
The account 'cmc' on the remote host has the default password 'password'. An attacker can leverage this issue to gain administrative access to the affected system. Note that SolarWinds Log and Event Manager is known to use these credentials to provide complete, administrative access to the virtua...
SolarWinds Log and Event Manager < 6.0.1 HyperSQL Remote Code Execution
According to its self-reported version number, the installation of SolarWinds Log and Event Manager on the remote host is a version prior to 6.0.1. It is, therefore, affected by a flaw in HyperSQL that allows a remote, unauthenticated user to execute arbitrary code under the context of the databa...
SolarWinds Storage Manager AuthenticationFilter Authentication Bypass
An authentication bypass vulnerability exists in SolarWinds Storage Manager. The vulnerability is due to a flaw within the AuthenticationFilter class. A remote unauthenticated attacker could exploit this vulnerability by bypassing the authentication filter and uploading malicious scripts to the...
SolarWinds Log and Event Manager Static Credentials (CVE-2014-5504)
A policy bypass vulnerability has been reported in SolarWinds Log and Event Manager. The vulnerability is due to the usage of static/default credentials to access the HyperSQL database. A remote attacker can exploit this vulnerability to access the database with administrator privileges...
SolarWinds Storage Manager Authentication Bypass
No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = ExcellentRanking include Msf::Exploit::Remote::HttpClient include...
SolarWinds Storage Manager AuthenticationFilter RCE Vulnerability
SolarWinds Storage Manager is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SolarWinds Storage Manager - Authentication Bypass (Metasploit)
This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'SolarWinds Storage Manager Authentication Bypass', 'Description' = %q This module exploits an authentication bypass vulnerability in...
SolarWinds Storage Manager Authentication Bypass
This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'SolarWinds Storage Manager Authentication Bypass', 'Description' = %q This module exploits an authentication bypass vulnerability in...
SolarWinds Storage Manager Authentication Bypass Exploit
This Metasploit module exploits an authentication bypass vulnerability in Solarwinds Storage Manager. The vulnerability exists in the AuthenticationFilter, which allows to bypass authentication with specially crafted URLs. After bypassing authentication, is possible to use a file upload function ...
CVE-2014-5504
SolarWinds Log and Event Manager before 6.0 uses "static" credentials, which makes it easier for remote attackers to obtain access to the database and execute arbitrary code via unspecified vectors, related to HyperSQL...
Design/Logic Flaw
SolarWinds Log and Event Manager before 6.0 uses "static" credentials, which makes it easier for remote attackers to obtain access to the database and execute arbitrary code via unspecified vectors, related to HyperSQL...
CVE-2014-5504
SolarWinds Log and Event Manager pre-6.0.1 is affected by a HyperSQL authentication flaw due to static/default credentials, enabling a remote, unauthenticated attacker to execute arbitrary code in the database context. Some 6.0.0 instances may be unaffected; remediation is to upgrade to 6.0.1 or ...
CVE-2014-5504
SolarWinds Log and Event Manager before 6.0 uses "static" credentials, which makes it easier for remote attackers to obtain access to the database and execute arbitrary code via unspecified vectors, related to HyperSQL...